add middleware authentification on route to blast